Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
File: oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft (raw, json)
Hash identifier: iOcNwYPsHhilZ6vIIoVKP+0qRHbLcWe2KyrCXSyIbnk=
Subject key identifier: 67:1D:BF:69:7E:93:37:FD:53:B2:4A:37:36:B3:57:60:77:42:5D:FA
Authority key identifier: A1:0F:34:1D:3A:B5:63:B9:FC:40:98:0A:E7:C1:74:02:C2:15:EF:2A
Certificate issuer: /CN=a10f341d3ab563b9fc40980ae7c17402c215ef2a
Certificate serial: 019D28F2A77CD0F71BE1B8F5317B7653F1BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 07:01:24 +0000
Manifest this update: Thu 26 Mar 2026 07:01:24 +0000
Manifest next update: Fri 27 Mar 2026 07:01:24 +0000
Files and hashes: 1: oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl (hash: jC9krevtSLFIuSpICZH1/+3OmxLW3PKGXttZXJsAKHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:a7:7c:d0:f7:1b:e1:b8:f5:31:7b:76:53:f1:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a10f341d3ab563b9fc40980ae7c17402c215ef2a
Validity
Not Before: Mar 26 07:01:24 2026 GMT
Not After : Mar 27 07:01:24 2026 GMT
Subject: CN=671dbf697e9337fd53b24a3736b3576077425dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:14:22:c2:29:29:14:47:d4:2c:36:ae:60:a9:
35:64:ca:4b:58:c9:0c:78:91:5e:dd:e6:09:a1:4d:
54:6e:5d:1a:94:4c:51:6a:3e:65:c6:4d:94:90:e3:
de:fc:80:27:37:8b:13:2b:22:e8:2f:cb:57:b4:43:
21:2f:03:a8:b9:e7:b3:ea:34:ad:d6:c6:88:36:d6:
1b:b1:d5:83:21:19:81:b1:ea:6a:f3:36:26:cb:96:
ad:4b:03:15:40:df:2d:91:dd:78:22:bd:6d:75:17:
a1:5d:0e:a3:a9:4f:05:cc:ef:b6:e1:6f:a2:9b:d9:
3e:b3:89:78:16:58:eb:95:89:11:e2:82:13:cf:74:
9e:7b:6d:c0:62:23:1e:13:c2:ff:98:f1:8a:f7:a0:
7c:81:ac:28:a3:f8:83:5e:60:66:b4:dc:f7:82:d6:
9d:88:40:f6:10:63:74:89:a5:5d:c9:cb:30:01:02:
f8:cb:ad:b6:f9:1c:4c:d2:8e:2a:dc:1b:92:f5:01:
ed:66:77:48:9b:0b:9c:ee:34:16:96:aa:4b:17:1a:
f6:ef:95:6c:98:c9:7a:af:24:56:68:92:43:52:0c:
e6:53:78:4c:eb:6c:db:4d:0e:0c:62:2c:f1:9e:6e:
ca:21:cf:f8:86:a3:57:f7:af:83:ab:b4:a5:55:9d:
9b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1D:BF:69:7E:93:37:FD:53:B2:4A:37:36:B3:57:60:77:42:5D:FA
X509v3 Authority Key Identifier:
keyid:A1:0F:34:1D:3A:B5:63:B9:FC:40:98:0A:E7:C1:74:02:C2:15:EF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:2f:5c:2b:da:c2:af:16:84:f4:9a:8b:29:00:fc:6e:3a:70:
55:43:9c:95:ca:0d:d2:7f:2e:5a:f9:9b:9f:97:3c:f5:94:00:
4d:04:e5:dd:dd:e0:ed:24:d3:04:cd:a4:77:0d:4c:63:b4:64:
13:2d:da:38:56:f5:cd:96:1c:e9:80:38:e3:f7:a9:97:55:37:
cb:e9:33:b4:cc:73:54:65:26:09:5f:80:f6:e3:af:d7:f4:80:
90:c7:41:c6:91:e7:43:84:70:1b:b3:f5:5a:1c:04:fc:12:6d:
4b:3a:a8:33:ec:fa:26:a0:2c:75:ec:48:ad:9f:3f:c0:e5:c9:
e9:c8:78:0c:83:e3:13:0e:f7:79:5f:25:5f:89:1c:17:25:5b:
f8:02:3f:bc:a3:4a:ad:bd:6a:4a:41:09:9a:5a:74:87:4e:b1:
16:69:24:01:53:24:0a:95:a6:78:41:19:ae:58:77:15:35:c7:
08:4f:05:8c:a9:a1:83:dd:ac:84:cf:8f:8e:b1:f8:cd:0c:52:
35:06:b3:5f:31:cb:75:cf:de:ec:47:bf:6c:91:c3:12:5c:97:
8b:88:ff:66:0a:ed:9f:c9:c9:84:b4:18:b8:8c:2c:85:64:5c:
b9:d3:96:51:f1:da:47:bd:aa:cb:f0:fb:61:b5:31:37:e3:e9:
98:8b:63:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:50 2026 by rpki-client